@@ -7,9 +7,9 @@ services:
77 ports :
88 - " 50051:50051"
99 volumes :
10- - ../../config:/app/config:ro
11- - ../../models:/app/models:ro
12- - ~/.cache/huggingface:/root/.cache/huggingface
10+ - ../../config:/app/config:ro,z
11+ - ../../models:/app/models:ro,z
12+ - ~/.cache/huggingface:/root/.cache/huggingface:z
1313 environment :
1414 - LD_LIBRARY_PATH=/app/lib
1515 # Use main config by default; override via CONFIG_FILE if needed
@@ -32,19 +32,21 @@ services:
3232 envoy :
3333 image : envoyproxy/envoy:v1.31.7
3434 container_name : envoy-proxy
35+ security_opt :
36+ - label=disable
3537 ports :
3638 - " 8801:8801" # Main proxy port
3739 - " 19000:19000" # Admin interface
3840 volumes :
39- - ./addons/envoy.yaml:/etc/envoy/envoy.yaml:ro
41+ - ./addons/envoy.yaml:/etc/envoy/envoy.yaml:ro,z
4042 command : ["/usr/local/bin/envoy", "-c", "/etc/envoy/envoy.yaml", "--component-log-level", "ext_proc:trace,router:trace,http:trace"]
4143 depends_on :
4244 semantic-router :
4345 condition : service_healthy
4446 networks :
4547 - semantic-network
4648 healthcheck :
47- test : ["CMD", "curl ", "-f ", "http:// localhost:19000/ready "]
49+ test : ["CMD", "bash ", "-c ", "(echo -e 'GET /ready HTTP/1.1\\r\\nHost: localhost\\r\\n\\r\\n' >&3; timeout 2 cat <&3) 3<>/dev/tcp/ localhost/19000 | grep -q LIVE "]
4850 interval : 10s
4951 timeout : 5s
5052 retries : 5
@@ -86,7 +88,7 @@ services:
8688 image : prom/prometheus:v2.53.0
8789 container_name : prometheus
8890 volumes :
89- - ./addons/prometheus.yaml:/etc/prometheus/prometheus.yaml:ro
91+ - ./addons/prometheus.yaml:/etc/prometheus/prometheus.yaml:ro,z
9092 - prometheus-data:/prometheus
9193 command :
9294 - --config.file=/etc/prometheus/prometheus.yaml
@@ -106,11 +108,11 @@ services:
106108 ports :
107109 - " 3000:3000"
108110 volumes :
109- - ./addons/grafana.ini:/etc/grafana/grafana.ini:ro
110- - ./addons/grafana-datasource.yaml:/etc/grafana/provisioning/datasources/datasource.yaml:ro
111- - ./addons/grafana-datasource-jaeger.yaml:/etc/grafana/provisioning/datasources/datasource_jaeger.yaml:ro
112- - ./addons/grafana-dashboard.yaml:/etc/grafana/provisioning/dashboards/dashboard.yaml:ro
113- - ./addons/llm-router-dashboard.json:/etc/grafana/provisioning/dashboards/llm-router-dashboard.json:ro
111+ - ./addons/grafana.ini:/etc/grafana/grafana.ini:ro,z
112+ - ./addons/grafana-datasource.yaml:/etc/grafana/provisioning/datasources/datasource.yaml:ro,z
113+ - ./addons/grafana-datasource-jaeger.yaml:/etc/grafana/provisioning/datasources/datasource_jaeger.yaml:ro,z
114+ - ./addons/grafana-dashboard.yaml:/etc/grafana/provisioning/dashboards/dashboard.yaml:ro,z
115+ - ./addons/llm-router-dashboard.json:/etc/grafana/provisioning/dashboards/llm-router-dashboard.json:ro,z
114116 - grafana-data:/var/lib/grafana
115117 networks :
116118 - semantic-network
@@ -175,9 +177,16 @@ services:
175177 - PYTHONUNBUFFERED=1
176178 volumes :
177179 # Persistent pipelines storage (auto-loaded on start)
178- - openwebui-pipelines:/app/pipelines
179- # Mount our vLLM Semantic Router pipeline
180- - ./addons/vllm_semantic_router_pipe.py:/app/pipelines/vllm_semantic_router_pipe.py:ro
180+ - type : volume
181+ source : openwebui-pipelines
182+ target : /app/pipelines
183+ volume :
184+ nocopy : true
185+ # Mount our vLLM Semantic Router pipeline (read-only) into the persistent dir
186+ - type : bind
187+ source : ./addons/vllm_semantic_router_pipe.py
188+ target : /app/pipelines/vllm_semantic_router_pipe.py
189+ read_only : true
181190 networks :
182191 - semantic-network
183192
@@ -202,7 +211,7 @@ services:
202211 - HUGGINGFACE_HUB_TOKEN=${HUGGINGFACE_HUB_TOKEN:-}
203212 - HF_HUB_ENABLE_HF_TRANSFER=1
204213 volumes :
205- - ../../models:/app/models:ro
214+ - ../../models:/app/models:ro,z
206215 - hf-cache:/home/llmkatan/.cache/huggingface
207216 networks :
208217 semantic-network :
@@ -235,7 +244,7 @@ services:
235244 - TARGET_CHATUI_URL=http://chat-ui:3000
236245 - ROUTER_CONFIG_PATH=/app/config/config.yaml
237246 volumes :
238- - ../../config:/app/config:rw
247+ - ../../config:/app/config:rw,z
239248 ports :
240249 - " 8700:8700"
241250 networks :
0 commit comments